Overview

overview

9

Static

static

9

Spoof Inst...ew.chm

windows7-x64

1

Spoof Inst...ew.chm

windows10-2004-x64

1

Spoof Inst...ew.exe

windows7-x64

6

Spoof Inst...ew.exe

windows10-2004-x64

6

Spoof Inst...pt.ps1

windows7-x64

3

Spoof Inst...pt.ps1

windows10-2004-x64

3

Spoof Inst...ID.cmd

windows7-x64

1

Spoof Inst...ID.cmd

windows10-2004-x64

1

Spoof Inst...id.exe

windows7-x64

3

Spoof Inst...id.exe

windows10-2004-x64

3

Spoof Inst...64.exe

windows7-x64

1

Spoof Inst...64.exe

windows10-2004-x64

1

Spoof Inst...me.bat

windows7-x64

3

Spoof Inst...me.bat

windows10-2004-x64

7

Spoof Inst...sk.exe

windows7-x64

5

Spoof Inst...sk.exe

windows10-2004-x64

5

Spoof Inst...ch.exe

windows7-x64

7

Spoof Inst...ch.exe

windows10-2004-x64

7

Spoof Inst...gs.vbs

windows7-x64

3

Spoof Inst...gs.vbs

windows10-2004-x64

1

Spoof Inst...ol.exe

windows7-x64

7

Spoof Inst...ol.exe

windows10-2004-x64

7

Spoof Inst...he.bat

windows7-x64

1

Spoof Inst...he.bat

windows10-2004-x64

1

Spoof Inst...or.url

windows7-x64

1

Spoof Inst...or.url

windows10-2004-x64

1

Spoof Inst...on.bat

windows7-x64

8

Spoof Inst...on.bat

windows10-2004-x64

8

Spoof Inst...er.exe

windows7-x64

6

Spoof Inst...er.exe

windows10-2004-x64

6

Spoof Inst...le.exe

windows7-x64

6

Spoof Inst...le.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    116s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-08-2024 21:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Spoof Instructions/Spoof Toolz/VolChange/_/Volumeid64.exe

  • Size

    165KB

  • MD5

    81a45f1a91448313b76d2e6d5308aa7a

  • SHA1

    0d615343d5de03da03bce52e11b233093b404083

  • SHA256

    fb0d02ea26bb1e5df5a07147931caf1ae3d7d1d9b4d83f168b678e7f3a1c0ecd

  • SHA512

    675662f84dfcbf33311f5830db70bff50b6e8a34a4a926de6369c446ea2b1cf8a63e9c94e5a5c2e1d226248f0361a1698448f82118ac4de5a92b64d8fdf8815d

  • SSDEEP

    3072:PngbfXWm18pX82lOl7NuT7DLM5Weo5UFs5QM8JwDmtFk1glurXEa:/gbfXWVoRNuT7DkbFsKM1glI

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Spoof Instructions\Spoof Toolz\VolChange\_\Volumeid64.exe
    "C:\Users\Admin\AppData\Local\Temp\Spoof Instructions\Spoof Toolz\VolChange\_\Volumeid64.exe"
    1⤵
      PID:3024

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads